California child safety laws are in a divided legal position as of September 21, 2026: parts of the California Age-Appropriate Design Code Act can be enforced, while several major restrictions remain blocked under court orders. A separate law, the Protecting Our Kids from Social Media Addiction Act, is scheduled to take effect on January 1, 2027, but it is still tied to regulatory work and legal challenges.
The result is not a full green light for California regulators, nor a complete victory for technology trade groups. The current record shows a narrower, provision-by-provision legal fight over how far the state may go in regulating online services used by children. The human rights issue is direct: the state has framed these measures around child welfare and digital safety, while challengers have raised constitutional objections, including free speech concerns.
Why California child safety laws remain partly blocked
What California child safety laws allow now
The California Age-Appropriate Design Code Act, known as CAADCA, was codified at California Civil Code sections 1798.99.28 through 1798.99.40. According to a state-by-state legal tracker maintained by Orrick, the law is only partially enforceable after litigation over its scope and constitutionality under California online safety law.
The Ninth Circuit’s March 12, 2026 decision changed the posture of the case. The appellate court vacated a blanket preliminary injunction that had stopped enforcement of the entire CAADCA. In doing so, it held that NetChoice had not met its burden, under the governing facial-challenge standard, to show that the full law was invalid in all applications.
That ruling allowed enforcement of two significant areas. First, the coverage definition tied to services “likely to be accessed by children” was no longer blocked on the same blanket basis. Second, the age-estimation requirement in California Civil Code section 1798.99.31(a)(5) was allowed to move forward. Those provisions now form the enforceable core of CAADCA while the case continues.
The Provisions Still Under Injunction
The same appellate ruling did not revive the whole statute. The Ninth Circuit affirmed the injunction against the CAADCA data-use restrictions in sections 1798.99.31(b)(1) through (4), and against the restriction on “dark patterns” in section 1798.99.31(b)(7). The court found those provisions too vague to enforce at this stage.
Other provisions identified in the litigation as still blocked include the data protection impact assessment requirement, profiling restrictions, data minimization rules, and the dark patterns limitation. Those parts remain before the district court on remand. That means California officials cannot treat CAADCA as fully operational, and covered businesses cannot assume the litigation has ended.
The March 2025 injunction from the U.S. District Court for the Northern District of California had stopped enforcement of the entire law. The March 2026 appellate ruling narrowed that injunction. It did not resolve all constitutional questions, and it did not decide every as-applied issue that may arise from future enforcement.
SB 976 Has A Later Effective Date
Parental Consent And Age Assurance Rules
SB 976, formally called the Protecting Our Kids from Social Media Addiction Act, was signed into law in September 2024. The California Department of Justice states that the law requires covered platforms to obtain verifiable parental consent before offering “addictive feeds” to minors, and that the Attorney General must adopt regulations for age assurance and parental consent methods by January 1, 2027 under the SB 976 rulemaking process.
As of mid-2026, a proposed regulation had been released and remained under review. Public comments and regulatory oversight were still part of the process. That distinction matters because statutory text and enforceable regulatory standards are not the same. Until regulations are finalized and the effective date arrives, SB 976 remains a law in preparation rather than a fully operating enforcement program.
California child safety laws therefore sit on two tracks. CAADCA is partly active after appellate review, while SB 976 is scheduled for January 1, 2027 and depends on rulemaking over how platforms verify age and obtain parental consent. Both tracks remain vulnerable to further court challenges.
Why The Timing Matters For Enforcement
The timing affects regulators, platforms, parents, and young users. If age-estimation duties under CAADCA are enforceable now, covered services face immediate compliance questions. If SB 976 rules are still being shaped, platforms have less certainty about the technical and procedural standards they will need to meet by January 1, 2027.
This timing also affects public accountability. When a law is partly enjoined, public statements about child safety protections can overstate what the state may legally enforce. Conversely, describing the statutes as entirely defeated would also be inaccurate. The present status is narrower: some duties are live, some are blocked, and some have not yet taken effect.
Court Rulings Shape The Human Rights Debate
Child Protection And Constitutional Limits
The legal conflict reflects a recurring institutional question: how should a state protect children online without imposing vague or overbroad burdens on speech and information access? Courts have not rejected every California claim of authority in this area. They have, however, required narrower scrutiny of provisions that regulate platform design, data practices, and user experience.
From a human rights perspective, the interests are not limited to privacy. Children’s rights to safety, development, and protection from exploitative design are part of the public policy rationale behind these laws. At the same time, lawful expression, access to information, and due process constraints limit how broadly the state may write and enforce these duties.
A March 25, 2026 Los Angeles Superior Court jury verdict, described in the research record, found Meta and Google negligent for designing social media platforms harmful to youngsters and awarded US$6 million in damages. Meta later had motions for a new trial denied on June 10, 2026. That civil case is separate from the CAADCA and SB 976 litigation, but it shows that platform design is also being tested through tort claims, not only statutory regulation.
New Laws Signed On September 10, 2026
On September 10, 2026, Governor Gavin Newsom signed multiple new laws expanding online youth protections. The research record states that one law bans addictive social media features for users under 16, another requires AI companies to disclose when users are interacting with chatbots, and other measures broaden protections against harmful content. Technology companies have already signaled intent to challenge those laws based on free speech concerns.
Those later statutes should not be confused with CAADCA or SB 976. They add to the broader California policy program, but their enforceability will depend on their own text, effective dates, implementing rules, and any court orders. For more detailed information on related topics within the same network, you can refer to CA Views, which tracks California public affairs developments.
What Businesses And Families Can Verify
A Narrow Enforcement Checklist
The most reliable way to read the present status is by separating enforceable provisions from blocked provisions and scheduled provisions. The following table reflects the research record as of September 21, 2026.
For businesses, that means compliance planning cannot rely on a single yes-or-no answer. A platform may need to assess whether it is likely to be accessed by children and whether age-estimation duties apply, while recognizing that several CAADCA duties remain blocked. For families, it means some legal protections are being developed or litigated rather than already available as enforceable rules.
California child safety laws also raise practical questions that courts have not fully resolved: how age assurance can be done without collecting excessive data, how parental consent can be verified, and how regulators can define harmful design features with enough precision to survive constitutional review. Those questions are legal and technical, not merely political.
California child safety laws as of September 21, 2026
The confirmed status is limited but consequential. CAADCA is not fully blocked. Its coverage definition and age-estimation requirement may be enforced after the Ninth Circuit narrowed the earlier injunction. At the same time, the data-use restrictions, dark patterns provision, data protection impact assessment requirement, profiling rules, and data minimization rules remain blocked or unresolved in the continuing case.
SB 976 is separate. It was enacted in 2024, is scheduled to take effect on January 1, 2027, and depends on Attorney General regulations for age assurance and parental consent. Those rules were still under review after a proposed regulation was released in 2026.
The legal record supports a cautious assessment: California child safety laws are moving forward, but only in pieces. Their final shape will depend on district court proceedings, regulatory decisions, and any further appeals. Until those steps are complete, any account of California’s online youth protections should distinguish enacted statutes from enforceable obligations and scheduled rules from blocked provisions.
